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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1 . (Currently Amended) A method for limiting access to an electronic 
document, comprising: 

creating a process-driven security policy having a plurality of states, with each of 
the states having a different set of access restrictions; 

associating an identifier to the process-driven security policy; 

making the identifier available to certain of users or groups of users; 

associating the electronic document with at least one of the states of the process- 
driven security policy to impose access restrictions on an electronic document; and 

changing the state of the process-driven security policy for the electronic 
document automatically based on an internal or extemal svstem-level event, wherein the 
changed state is based on a transition rule associated with the event. 

2. (Previously Presented) The method as recited in claim 1, wherein the 
identifier is a classifier. 

3. (Previously Presented) The method as recited in claim 1, wherein the 
process-driven security policy is provided or part of a document security system. 
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4. (Previously Presented) The method as recited in claim 1, wherein said 
method further comprises: 

creating the electronic document; and 

assigning the identifier to the created electronic document. 

5. (Previously Presented) The method as recited in claim 1, wherein the 
process-driven security policy is provided or part of a document security system, and 

wherein said method further comprises: 

creating a plurality of electronic documents; and 

assigning the identifier to each of the created electronic docimients. 

6. (Currently Amended) A method for imposing access restrictions on an 
electronic document, comprising: 

providing at least one process-driven security policy to a client machine, the 
process-driven security policy having a plurality of states associated therewith with each 
of the states having a different set of access restrictions : 

associating the electronic document with at least one of the states of the process- 
driven security policy to impose access restrictions on the electronic document, the 
access restrictions being dependent on the at least one of the states of the process-driven 
security policy; and 

subsequently changing the state of the process-driven security policy for the 
electronic document automatically based on an intemal or extemal svstem-level event, 
wherein the changed state is based on a transition rule associated with the event. 
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7. (Cancelled) 

8. (Previously Presented) The method as recited in claim 6, wherein the 
event is a user-triggered event. 

9. (Previously Presented) The method as recited in claim 6, wherein the 
event occurs at or is received at the client machine. 

10. (Previously Presented) The method as recited in claim 6, wherein the 
electronic document includes security information, and the security information includes 
at least an indication of the state of the process-driven security policy for the electronic 
document. 

1 1 . (Previously Presented) The method as recited in claim 6, wherein said 
method is performed on a pluraUty of documents on a document-by-document basis. 

12. (Previously Presented) The method as recited in claim 6, wherein at the 
client machine, each of a plurality of electronic documents is in one of the states of the 
process-driven security policy. 

13. (Currently Amended) A tangible data storage device including at least 
computer program code for imposing access restrictions on an electronic document, 
comprising: 
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computer program code for providing at least one process-driven security policy 
to a client machine, the process-driven security policy having a plurality of states 
associated therewith with each of the states having a different set of access restrictions : 

computer program code for associating the electronic document with at least one 
of the states of the process-driven security policy to impose access restrictions on the 
electronic docxmient, the access restrictions being dependent on the at least one of the 
states of the process-driven security policy; and 

computer program code for changing the state of the process-driven security 
policy for the electronic document automatically based on an intemal or extemal system- 
level event, wherein the changed state is based on a transition rule associated with the 
event. 

14. (Cancelled) 

15. (Previously Presented) The data storage device as recited in claim 13, 
wherein the event is a user-triggered event. 

16. (Previously Presented) The data storage device as recited in claim 13, 
wherein the event occurs at or is received at the client machine. 

17. (Previously Presented) The data storage device as recited in claim 13, 
wherein the electronic document includes security information, and the security 
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information includes at least an indication of the state of the process-driven security 

policy for the electronic document, 

18. (Previously Presented) The data storage device as recited in claim 13, 
wherein the process-driven security policy is imposed on a plurality of documents on a 
document-by-document basis. 

19. (Previously Presented) The data storage device as recited in claim 13, 
wherein at the client machine, each of a plurality of electronic documents is in one of the 
states of the process-driven security policy. 

20. (New) The method as recited in claim 1, wherein the event is a user- 
triggered event. 

21 . (New) The method as recited in claim 1, wherein the event occurs at or is 
received at the client machine. 
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